Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
File:                     3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa (raw, json)
Hash identifier:          aWT1FD+WL4s+hNG2W0KgGF45YIr64S1sQW1WskHY1nQ=
Subject key identifier:   FA:1D:01:9B:AE:1D:ED:4A:F6:84:7F:0F:D1:40:1D:43:C3:29:88:82
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F4328584B8BE21E3F9CDF07E549A9BD00
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1e:3f:9c:df:07:e5:49:a9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=d9e96ea3-0da2-4c88-ae6e-e36f1531b3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:d0:5e:3b:69:d3:31:77:16:c7:81:a8:91:
                    f2:ce:93:c7:aa:c6:39:0d:d4:f6:a7:b1:e2:a9:0b:
                    f8:52:c7:11:ce:8c:ff:63:f0:00:eb:7b:66:64:b0:
                    14:7c:aa:43:17:76:36:e4:cb:76:87:bf:92:7e:a3:
                    12:7b:a7:0f:d5:fd:62:c0:5c:22:73:51:03:e2:cb:
                    21:3a:37:3d:69:a9:55:cd:91:76:6b:4d:32:29:5c:
                    4a:5f:04:6a:da:2d:a7:00:37:cb:84:ab:11:79:c5:
                    2d:10:db:2f:bd:d8:5f:ff:20:51:15:52:0b:ed:9d:
                    e8:02:75:0e:d2:cc:05:b9:e0:41:12:d0:4c:4e:c0:
                    7d:0a:50:1c:23:6e:64:bd:db:f0:a0:e4:4d:34:b5:
                    0f:e9:69:94:bf:f8:29:4f:6e:f8:35:b9:76:1b:d3:
                    25:1c:39:7f:ed:91:18:d0:bb:10:64:8e:f6:79:ae:
                    5c:1d:12:0c:50:53:d9:2f:20:f5:df:bb:ff:47:e0:
                    92:9f:cd:1e:74:64:90:7a:14:03:0e:f7:9c:5d:d3:
                    4c:db:7a:2f:76:ea:5a:97:d2:fc:e9:62:09:15:c7:
                    d0:b7:7f:bb:a6:b5:93:fb:ff:4c:d2:8c:c0:54:e8:
                    a4:5d:25:f0:c6:a4:9c:1e:92:c7:53:ae:cb:c0:e4:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1D:01:9B:AE:1D:ED:4A:F6:84:7F:0F:D1:40:1D:43:C3:29:88:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/3ae9b04b-2a58-3aed-8b71-6d59c1a1b9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:57:c8:da:44:8a:33:2a:54:55:2a:5f:82:c0:b3:9a:76:9c:
         1c:25:47:4b:e7:e1:a5:7b:b5:23:73:8b:4c:47:01:8f:58:ca:
         dc:f9:8d:a3:35:d3:1a:5a:7d:a9:f4:ae:ed:90:2c:5b:26:40:
         5e:fc:fe:a4:e7:e5:5d:c9:70:45:2b:3f:12:6b:ca:d0:68:1c:
         ef:57:cf:fb:6e:2e:e4:78:b4:9b:35:18:71:68:b3:a2:8c:77:
         02:51:a5:73:af:0f:e9:9e:ba:e4:8e:8a:cd:88:80:65:ed:bd:
         d7:9d:02:0c:ca:21:40:15:d7:12:3b:87:1a:bf:fc:58:9a:9f:
         86:f2:8e:3d:ec:a7:a4:00:6a:76:75:0a:5f:61:82:31:37:ce:
         1f:0d:2a:f8:6b:20:79:34:6d:78:3e:f8:b1:ec:af:3f:e2:b9:
         d9:f8:9b:cd:62:27:7f:17:fd:09:fb:3c:39:cf:09:c4:a7:6f:
         e7:b8:42:d0:16:ad:c6:22:29:d8:74:57:2a:0c:98:c9:6f:16:
         6e:9d:07:f3:7f:9f:80:17:a4:20:fc:48:24:83:96:c6:cc:a0:
         a0:6a:a6:e8:aa:fc:30:a6:eb:26:bd:a1:1f:15:34:f5:a8:14:
         3b:00:6a:00:4d:e9:94:45:04:1b:cf:6c:aa:f2:ba:b3:1c:dc:
         14:8b:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:49 2025 by rpki-client